Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/34995f-8a45-45fb-81f2-2001779926cf/1/MenbQitjczJSiuYo2dpQ5AOX-2Q.mft
File: MenbQitjczJSiuYo2dpQ5AOX-2Q.mft (raw, json)
Hash identifier: juh59lpTrJfDyeR/mJamwa+4zSVxHJA9Xfel3l4Bl3Y=
Subject key identifier: 6F:3E:59:15:F0:B7:74:65:8F:BA:86:FF:22:15:7D:3D:11:59:7D:76
Authority key identifier: 31:E9:DB:42:2B:63:73:32:52:8A:E6:28:D9:DA:50:E4:03:97:FB:64
Certificate issuer: /CN=31e9db422b637332528ae628d9da50e40397fb64
Certificate serial: 0194C3F61262BD93ED4A4BEEF1B6791A7227
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MenbQitjczJSiuYo2dpQ5AOX-2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/34995f-8a45-45fb-81f2-2001779926cf/1/MenbQitjczJSiuYo2dpQ5AOX-2Q.mft
Manifest number: 3C
Signing time: Sun 02 Feb 2025 00:01:11 +0000
Manifest this update: Sun 02 Feb 2025 00:01:11 +0000
Manifest next update: Mon 03 Feb 2025 00:01:11 +0000
Files and hashes: 1: MenbQitjczJSiuYo2dpQ5AOX-2Q.crl (hash: RJmSCJ+o3fsLkrCot8esFTipM+fZ8RB6jT/bu3ZW0PM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/34995f-8a45-45fb-81f2-2001779926cf/1/MenbQitjczJSiuYo2dpQ5AOX-2Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/34995f-8a45-45fb-81f2-2001779926cf/1/MenbQitjczJSiuYo2dpQ5AOX-2Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/MenbQitjczJSiuYo2dpQ5AOX-2Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:f6:12:62:bd:93:ed:4a:4b:ee:f1:b6:79:1a:72:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31e9db422b637332528ae628d9da50e40397fb64
Validity
Not Before: Feb 2 00:01:11 2025 GMT
Not After : Feb 3 00:01:11 2025 GMT
Subject: CN=6f3e5915f0b774658fba86ff22157d3d11597d76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:08:09:11:e1:da:04:54:f3:b8:4a:90:44:4a:
43:63:7d:0e:d8:3a:22:b8:9d:15:4e:08:0a:2c:ae:
01:cd:42:ed:52:02:4e:96:16:c5:ec:6c:88:2d:95:
f1:a6:56:34:3a:5d:47:a8:3f:fd:8c:ed:c5:29:d9:
5e:0a:56:e1:86:b3:fc:0f:0a:9a:a6:34:3c:1a:e6:
6b:55:33:1b:1b:13:96:27:5f:df:c2:33:a2:06:58:
9d:70:fb:82:eb:7d:13:0c:cc:cf:57:93:28:dd:c9:
9e:1f:53:ff:64:f4:8f:f2:3c:e5:fe:a5:77:a4:ea:
31:41:38:3b:78:bd:9b:78:e7:0e:b9:e3:e1:de:e1:
dd:a6:39:ae:f6:5b:44:f7:c3:e5:e4:c2:87:e9:42:
c6:c4:a5:08:e5:33:df:e0:f0:61:2d:d1:9d:ca:0f:
50:8d:4e:70:c7:3e:80:6b:84:7b:91:03:4a:dc:ad:
3a:55:de:fa:32:b1:56:04:23:4c:66:e0:6d:38:fd:
bf:4b:65:35:9a:ee:02:dd:1f:a0:03:02:e3:d2:1b:
13:55:9e:13:3f:0d:95:d0:59:e6:63:a6:38:f4:69:
b6:6f:10:79:4c:e8:9d:51:f2:7e:82:0f:d6:8e:48:
4a:e8:13:3b:6b:51:4b:78:b3:b7:fe:8d:9c:1c:cb:
c4:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:3E:59:15:F0:B7:74:65:8F:BA:86:FF:22:15:7D:3D:11:59:7D:76
X509v3 Authority Key Identifier:
keyid:31:E9:DB:42:2B:63:73:32:52:8A:E6:28:D9:DA:50:E4:03:97:FB:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MenbQitjczJSiuYo2dpQ5AOX-2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/34995f-8a45-45fb-81f2-2001779926cf/1/MenbQitjczJSiuYo2dpQ5AOX-2Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/34995f-8a45-45fb-81f2-2001779926cf/1/MenbQitjczJSiuYo2dpQ5AOX-2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:39:1c:29:c3:be:b1:a9:55:35:e8:fe:5e:bb:52:c4:28:f5:
ef:9a:da:6a:1c:c2:58:9e:66:23:6a:59:10:f5:fe:f6:c2:77:
d0:4f:e5:c2:65:22:bf:3d:6c:40:1c:ff:fd:f8:d4:10:19:69:
04:3e:31:50:fd:6b:34:a0:aa:af:b3:ad:96:90:ef:2c:b3:49:
d7:7a:d6:48:5c:cd:dd:09:90:d7:60:c5:15:d0:b6:ee:35:91:
bc:09:de:90:f4:ae:75:23:2e:bb:ce:a2:3d:47:58:44:f0:0a:
c6:1a:e9:44:02:0d:e5:c4:8d:6b:34:d5:99:67:a6:1b:bb:9f:
f5:0b:a3:1f:02:fe:ba:c3:07:13:02:35:28:7c:68:98:46:0a:
58:cf:90:92:60:e8:57:00:af:4a:9f:cf:04:49:f7:ab:48:97:
48:b4:f2:a8:97:f5:d8:90:f3:4f:6d:37:2f:9d:9e:a8:e0:df:
06:eb:2f:c2:51:e2:a3:95:f3:f6:ca:3b:8a:2b:87:a0:b8:72:
f7:99:9f:73:4b:ac:08:38:ea:e2:37:bd:56:25:db:64:64:31:
c3:78:d8:6c:25:06:6a:81:42:4f:fa:f0:7b:24:4d:bf:44:15:
bc:49:a2:8d:4e:26:54:32:03:c0:22:f6:3f:bb:9c:75:37:2e:
90:e8:fa:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:48:17 2025 by rpki-client